discount-hygiene-cleanup

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill performs routine administrative tasks for Shopify store management using authorized toolkits (shopify-admin). It does not attempt to bypass security controls or exfiltrate data to unauthorized third parties.
  • [COMMAND_EXECUTION]: The skill is designed to perform data-modifying operations via the discountCodeDelete GraphQL mutation. This capability is explicitly documented as its primary purpose, and safety measures are implemented, including a mandatory dry_run parameter that defaults to true, requiring explicit user intent to commit changes.
  • [DATA_EXFILTRATION]: Analysis of the GraphQL operations and workflow steps confirms that data access is restricted to the Shopify store environment. Information retrieved (discount titles, expiry dates, usage counts) is used solely for the cleanup logic and is not transmitted to external or suspicious domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 04:14 AM